!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

363 Members
Discussions around Security | Triaging happens in #security:nixos.org126 Servers

Load older messages


SenderMessageTime
21 Oct 2024
@fabianhjr:matrix.orgFabián Herediaabout 2-3 releases ago17:03:00
@emilazy:matrix.orgemilyright17:03:12
@fabianhjr:matrix.orgFabián Herediaand previous flow was to directly throw on aliases that were going to be removed / had a planned removal.17:03:41
@emilazy:matrix.orgemily I was thinking we could just lib.mapAttrs (k: v: lib.warn "hey man stop using ${k}" v) the aliases.nix attrset 17:03:42
@emilazy:matrix.orgemilyI don't know if that's crazy or not.17:03:54
@emilazy:matrix.orgemily maybe even do a tryEval dance so it'll only warn on things that aren't already throws 17:04:14
@fabianhjr:matrix.orgFabián HerediaBut not all aliases there are intended to be removed, there is a top level comment on the syntax of comments to avoid auto move to throw/auto removal from the prune script17:04:29
@fabianhjr:matrix.orgFabián Heredia
# A script to convert old aliases to throws and remove old
# throws can be found in './maintainers/scripts/remove-old-aliases.py'
17:05:15
@fabianhjr:matrix.orgFabián Heredia
# Add 'preserve, reason: reason why' after the date if the alias should not be removed.
# Try to keep them to a minimum.
17:05:39
@emilazy:matrix.orgemilywell, we could separate out the ones not to be removed into another section.17:05:47
@emilazy:matrix.orgemily { …preserve… } // lib.mapAttrs … 17:05:53
@emilazy:matrix.orgemilythat's probably a good thing anyway17:05:58
@emilazy:matrix.orgemilysince it lets us see which ones are more load-bearing17:06:04
@emilazy:matrix.orgemilyFWIW there's only 4 of them.17:06:39
@emilazy:matrix.orgemilyand a couple of them I find dubious, but that's another matter17:06:53
@fabianhjr:matrix.orgFabián Herediahttps://github.com/NixOS/nixpkgs/pull/35028917:14:37
@emilazy:matrix.orgemilyshouldn't the cut-off be 24.05?17:17:47
@emilazy:matrix.orgemilysince everything it removed would have been throwing for an entire release cycle?17:17:56
@fabianhjr:matrix.orgFabián Herediayeah17:18:00
@fabianhjr:matrix.orgFabián Herediabut this does mean that those weren't removed the previous cycle17:18:17
@emilazy:matrix.orgemilyhmm17:19:09
@emilazy:matrix.orgemilyimage.png
Download image.png
17:19:14
@emilazy:matrix.orgemilyshould probably make it 2023-11 at least17:19:17
@emilazy:matrix.orgemily(does the script handle aliases-to-throws, I wonder…)17:19:40
@fabianhjr:matrix.orgFabián Herediayeah, but doesn't eval with that17:20:03
@fabianhjr:matrix.orgFabián Herediajust remove the --only-throws flag17:20:18
@emilazy:matrix.orgemily yeah, so it has removed nodejs_16 but left nodejs-16_x = nodejs_16, e.g. 17:21:33
@emilazy:matrix.orgemilyI guess that's a reason to not do that kind of thing17:21:39
@emilazy:matrix.orgemilythose seem to be the only cases, perhaps you could clean up the broken Node aliases in another commit?17:22:25
@fabianhjr:matrix.orgFabián Herediadone17:25:17

Show newer messages


Back to Room ListRoom Version: 9